Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
File: 795bae65-e494-4497-8c64-6c78c5a4b388.roa (raw, json)
Hash identifier: V80tDGiOs8i9GTtiTSrMjKZlvZALaQ+d/mrztmOGK74=
Subject key identifier: DB:89:6F:0E:36:1C:9D:0D:BD:55:F5:2A:30:5C:DE:83:9D:A1:AF:D8
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 355B16FCC51F9F2DDB8FA811096930031F3FED85
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
Signing time: Sat 27 Sep 2025 00:52:36 +0000
ROA not before: Sat 27 Sep 2025 00:52:36 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5b:16:fc:c5:1f:9f:2d:db:8f:a8:11:09:69:30:03:1f:3f:ed:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Sep 27 00:52:36 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=22415eebd2664a48f27773487c9013a620ccb5a7cba7d9b651008ac601b3561d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:cf:a8:26:21:bc:e9:6c:e7:59:87:f2:d9:
19:87:58:7a:80:c1:52:8d:25:29:42:db:6a:75:25:
23:17:4f:db:2a:a0:f5:26:86:93:2e:3e:ea:23:c0:
87:76:93:bf:d7:c9:ec:54:1c:9a:d0:05:bf:e7:39:
ae:28:00:80:b1:a0:2f:18:da:1b:60:a6:c9:2c:4c:
8f:52:00:88:0b:33:bd:93:d7:06:69:70:ac:68:9e:
3d:f3:60:68:55:cf:d0:0b:4a:12:2b:e4:69:f5:39:
7d:76:1f:06:56:c7:6f:f1:9a:3f:aa:6a:e0:bf:18:
f8:3a:19:79:d8:c4:45:a2:93:cd:bf:dc:77:dc:94:
e7:98:a8:e7:d4:ee:b7:8f:b0:2d:66:68:84:00:8e:
66:56:73:5c:1a:ef:98:21:2b:fe:4a:06:c0:58:7e:
b9:0e:62:cb:30:71:3b:19:9c:3b:da:8e:59:eb:aa:
f1:fd:13:74:32:4a:78:20:19:1c:26:fd:4f:49:de:
63:fc:e3:75:36:98:d9:fb:bb:a6:ee:5a:0b:0e:67:
9c:04:47:c0:12:c0:77:a4:b3:8f:02:e7:38:30:d6:
00:36:71:68:eb:43:ac:f4:fd:fd:26:3b:df:57:6b:
b9:e0:3a:96:81:a2:91:f5:c1:f3:84:3f:01:9b:ce:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:6F:0E:36:1C:9D:0D:BD:55:F5:2A:30:5C:DE:83:9D:A1:AF:D8
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.104.0/21
Signature Algorithm: sha256WithRSAEncryption
81:84:1d:27:7a:31:c3:ef:d2:b3:e4:50:4c:ee:44:18:eb:23:
9a:c3:37:50:3e:03:3d:75:70:11:e7:30:52:ee:01:d8:f5:da:
cd:52:b7:d9:17:a3:5b:98:1b:c7:18:42:f1:10:9f:d4:e0:5e:
12:1d:2b:7c:0e:8a:10:d5:12:dc:9a:59:9c:7b:a8:9a:2d:7e:
9e:c0:f8:80:58:82:62:46:29:9e:8c:b1:5e:99:dd:54:ec:97:
a1:f7:d2:ce:be:ea:aa:94:af:5d:ef:e0:77:19:da:74:b7:c2:
69:6c:66:8c:bb:21:43:55:f3:25:82:1c:22:67:fa:f7:83:c7:
18:ac:29:0a:b2:a5:d5:be:85:96:ba:22:2e:15:57:6e:92:a4:
d4:5b:03:5a:5d:7f:cf:e2:3c:36:95:6b:47:b7:ee:1e:a8:6f:
05:72:a2:ee:4b:09:a2:3d:cf:06:93:22:25:e5:0c:e0:b0:bd:
ae:9e:03:05:42:1f:53:33:bc:a2:12:5e:53:54:9d:e7:b8:4b:
c9:ed:ca:46:18:b0:54:8e:ec:09:3f:3c:3d:0b:e2:a0:9d:51:
b4:aa:f6:66:69:f7:a4:8e:cd:f2:52:1e:93:88:0d:06:08:c5:
85:3a:7d:7b:83:cc:51:8e:02:e2:cc:38:36:cc:e5:55:9b:a4:
6a:ae:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:08 2025 by rpki-client